{"id":"https://openalex.org/W1986778261","doi":"https://doi.org/10.1109/milcom.2012.6415581","title":"Detection of global, metamorphic malware variants using control and data flow analysis","display_name":"Detection of global, metamorphic malware variants using control and data flow analysis","publication_year":2012,"publication_date":"2012-10-01","ids":{"openalex":"https://openalex.org/W1986778261","doi":"https://doi.org/10.1109/milcom.2012.6415581","mag":"1986778261"},"language":"en","primary_location":{"id":"doi:10.1109/milcom.2012.6415581","is_oa":false,"landing_page_url":"https://doi.org/10.1109/milcom.2012.6415581","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"MILCOM 2012 - 2012 IEEE Military Communications Conference","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5110970521","display_name":"Hira Agrawal","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hira Agrawal","raw_affiliation_strings":["Applied Communications Sciences, Inc., Piscataway, NJ, USA","Applied Communication Sciences, Piscataway, NJ 08854, USA#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Applied Communications Sciences, Inc., Piscataway, NJ, USA","institution_ids":[]},{"raw_affiliation_string":"Applied Communication Sciences, Piscataway, NJ 08854, USA#TAB#","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5025915972","display_name":"Lisa Bahler","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Lisa Bahler","raw_affiliation_strings":["Applied Communications Sciences, Inc., Piscataway, NJ, USA","Applied Communication Sciences, Piscataway, NJ 08854, USA#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Applied Communications Sciences, Inc., Piscataway, NJ, USA","institution_ids":[]},{"raw_affiliation_string":"Applied Communication Sciences, Piscataway, NJ 08854, USA#TAB#","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5027522886","display_name":"Josephine Micallef","orcid":"https://orcid.org/0000-0001-5132-402X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Josephine Micallef","raw_affiliation_strings":["Applied Communications Sciences, Inc., Piscataway, NJ, USA","Applied Communication Sciences, Piscataway, NJ 08854, USA#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Applied Communications Sciences, Inc., Piscataway, NJ, USA","institution_ids":[]},{"raw_affiliation_string":"Applied Communication Sciences, Piscataway, NJ 08854, USA#TAB#","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5035395187","display_name":"Shane A. Snyder","orcid":"https://orcid.org/0000-0003-2709-9840"},"institutions":[{"id":"https://openalex.org/I1304082316","display_name":"United States Department of the Army","ror":"https://ror.org/035w1gb98","country_code":"US","type":"government","lineage":["https://openalex.org/I1304082316","https://openalex.org/I1330347796"]},{"id":"https://openalex.org/I2800475051","display_name":"CECOM Software Engineering Center","ror":"https://ror.org/044webc45","country_code":"US","type":"facility","lineage":["https://openalex.org/I2800475051","https://openalex.org/I4405253748","https://openalex.org/I4405254906"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Shane Snyder","raw_affiliation_strings":["US Army CERDEC, Aberdeen Proving Ground, MD, USA","US Army CERDEC, Aberdeen Proving Ground, MD, USA#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"US Army CERDEC, Aberdeen Proving Ground, MD, USA","institution_ids":["https://openalex.org/I2800475051"]},{"raw_affiliation_string":"US Army CERDEC, Aberdeen Proving Ground, MD, USA#TAB#","institution_ids":["https://openalex.org/I1304082316"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5054355304","display_name":"Alexandr Virodov","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Alexandr Virodov","raw_affiliation_strings":["Applied Communications Sciences, Inc., Piscataway, NJ, USA","Applied Communication Sciences, Piscataway, NJ 08854, USA#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Applied Communications Sciences, Inc., Piscataway, NJ, USA","institution_ids":[]},{"raw_affiliation_string":"Applied Communication Sciences, Piscataway, NJ 08854, USA#TAB#","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.976,"has_fulltext":false,"cited_by_count":20,"citation_normalized_percentile":{"value":0.73772538,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9980999827384949,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.9190083742141724},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8103370666503906},{"id":"https://openalex.org/keywords/control-flow","display_name":"Control flow","score":0.6954024434089661},{"id":"https://openalex.org/keywords/signature","display_name":"Signature (topology)","score":0.47480976581573486},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.42223498225212097},{"id":"https://openalex.org/keywords/control-flow-graph","display_name":"Control flow graph","score":0.41151565313339233},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3858247399330139},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.34099677205085754},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.2767817974090576},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.2592129707336426}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.9190083742141724},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8103370666503906},{"id":"https://openalex.org/C160191386","wikidata":"https://www.wikidata.org/wiki/Q868299","display_name":"Control flow","level":2,"score":0.6954024434089661},{"id":"https://openalex.org/C2779696439","wikidata":"https://www.wikidata.org/wiki/Q7512811","display_name":"Signature (topology)","level":2,"score":0.47480976581573486},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.42223498225212097},{"id":"https://openalex.org/C27458966","wikidata":"https://www.wikidata.org/wiki/Q1187693","display_name":"Control flow graph","level":2,"score":0.41151565313339233},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3858247399330139},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.34099677205085754},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.2767817974090576},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2592129707336426},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/milcom.2012.6415581","is_oa":false,"landing_page_url":"https://doi.org/10.1109/milcom.2012.6415581","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"MILCOM 2012 - 2012 IEEE Military Communications Conference","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.7400000095367432,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":40,"referenced_works":["https://openalex.org/W23283928","https://openalex.org/W157706324","https://openalex.org/W257864594","https://openalex.org/W1517733417","https://openalex.org/W1547027322","https://openalex.org/W1555363900","https://openalex.org/W1562168864","https://openalex.org/W1580559113","https://openalex.org/W1650842077","https://openalex.org/W1766830691","https://openalex.org/W1875062825","https://openalex.org/W1929568162","https://openalex.org/W1967365617","https://openalex.org/W1976373002","https://openalex.org/W2068211976","https://openalex.org/W2069421480","https://openalex.org/W2092483417","https://openalex.org/W2111046645","https://openalex.org/W2111379929","https://openalex.org/W2122802820","https://openalex.org/W2124834435","https://openalex.org/W2125540085","https://openalex.org/W2156279557","https://openalex.org/W2160504889","https://openalex.org/W2164114239","https://openalex.org/W2167975832","https://openalex.org/W2215486977","https://openalex.org/W2217467761","https://openalex.org/W2289349286","https://openalex.org/W2293624369","https://openalex.org/W2296635929","https://openalex.org/W2297626373","https://openalex.org/W3105162108","https://openalex.org/W4243646542","https://openalex.org/W4285719527","https://openalex.org/W6606400708","https://openalex.org/W6633398199","https://openalex.org/W6634623742","https://openalex.org/W6640402018","https://openalex.org/W6685837280"],"related_works":["https://openalex.org/W2160606508","https://openalex.org/W4288064943","https://openalex.org/W2138385884","https://openalex.org/W2166895275","https://openalex.org/W65788704","https://openalex.org/W2998775986","https://openalex.org/W157564837","https://openalex.org/W2080313875","https://openalex.org/W2011536294","https://openalex.org/W4210453401"],"abstract_inverted_index":{"Current":[0,33],"malware":[1,81,93,104],"detection":[2],"and":[3,18,51,112],"classification":[4],"tools":[5],"fail":[6],"to":[7,30,68,109],"adequately":[8],"address":[9,35],"variants":[10,25],"that":[11,22,26,42,96,106],"are":[12,56],"generated":[13],"automatically":[14],"using":[15,59],"new":[16,60,89],"polymorphic":[17,111],"metamorphic":[19,113],"transformation":[20],"engines":[21],"can":[23],"produce":[24],"bear":[27],"no":[28],"resemblance":[29],"one":[31],"another.":[32],"approaches":[34],"this":[36,84],"problem":[37],"by":[38,75],"employing":[39],"syntactic":[40],"signatures":[41],"mimic":[43],"the":[44,125],"underlying":[45],"control":[46],"structures":[47],"such":[48,76],"as":[49],"call-":[50],"flow-graphs.":[52],"These":[53],"techniques,":[54],"however,":[55],"easily":[57],"defeated":[58],"program":[61],"diversification":[62],"techniques.":[63],"This":[64],"hampers":[65],"our":[66,120],"ability":[67],"defend":[69],"against":[70],"zero":[71],"day":[72],"attacks":[73],"perpetrated":[74],"auto":[77],"\u201creplicating\u201d,":[78],"rapidly":[79],"spreading":[80],"variants.":[82],"In":[83],"paper,":[85],"we":[86],"present":[87,117],"a":[88],"form":[90],"of":[91,103,119,124],"abstract":[92],"signature":[94],"generation":[95],"is":[97,107],"based":[98],"on":[99],"extracting":[100],"semantic":[101],"summaries":[102],"code":[105],"immune":[108],"most":[110],"transformations.":[114],"We":[115],"also":[116],"results":[118],"initial,":[121],"experimental":[122],"evaluation":[123],"proposed":[126],"approach.":[127]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2022,"cited_by_count":3},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":2},{"year":2018,"cited_by_count":4},{"year":2016,"cited_by_count":4},{"year":2015,"cited_by_count":4}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}